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Personalizing hospital intranet web sites 



The present invention relates to an information system comprising a 
network and at least one web server which is accessible via the network by user equipment 
operating a web browser. The invention also relates to a method of providing comem from a 
web server to web browsers of users over a network in response to user requests. 

5 

In its particular aspects, the present invention relates to a web system or 
site which provides web or hypertext pages and/or other data objects that are personalized to 
the user. While, the present invention addresses personalization in an internal network, 
known as an intranet, maintained by a hospital or similar instimtion, many of its principles 
10 are also applicable to intranets in other settings, to internets, and to the World Wide Web 
accessible via the essentially global network known as the Internet. 

Intranets are internal information networks which are based on internet 
standards and protocols. World Wide Web tools are an ideal integration solution for 
providing health care workers almost immediate access to data from multiple sources in a 
15 hospital or other patient care giving setting. Easy and uniform access to medical records,-, 
laboratory results, images, notes, transcribed repons, and practice guidelines, can be 
obtained via the intranet from a web server by user's computer or other web browser capable 
equipment. However, the presumed needs, declared interests, appropriate levels of access to 
computer based patient records (CPR), and physical and equipment environments of users 

20 differ widely in such a setting. 

Conventional personalization systems match users to their declared and/or 
logged topics of interest but do not take into account their needs presumed from their 
professional attributes and assigned work, their access levels to CPR or their physical and 
equipment environments. 



25 



SUMMARY OF THF INVENTION 

It is an object of the present invention to provide a system and method wherein a web server 
is accessible by a web browser via a network, wherein the presumed needs, and/or access 
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rights to information and/or environments of users are taken into account in preseniins web 



pages to a user's web browser. 

These and other objects are satisfied by the server including means for 
5 dynamically generating content that is personalized to the user taking into account user 
equipment environment information provided or stored so as to be accessible to the server 
which is indicative of at least the lowest bandwidth link between the server and the user 
equipment. This limits the wailing time for downloads as well as the server load. Preferably, 
server 12 personalizes image size (full resolution or minified) and transmission compression 
10 (none, lossless, lossy/quality) to the link bandwidth and the capabilities of client equipment 
14, so that the user need not wait for large transfers at locations with low speed connections. 
This applies to video and sound files. 

In preferred embodiments, the web pages are created dynamically based 
on the capabilities of the users' computers, and/or display characteristics, and/or browser 
15 capabilities, and/or physical room characteristics. The content may also depend on the job of 
the user in the organization and/or the user's relationship to the instinition or the patient, 
and/or information access privileges 

These and other objects are satisfied by the server including means for 
dynamically generating content that is personalized to the user taking into account user^need 
20 information provided or stored so as to be accessible to the server which is indicative of at 
least the job of the user in the organization. In preferred embodiments, the web pages are 
created dynamically based on the user's relationship to the instinition or the patient, and/or 
information access privileges. The content may also depend on the lowest bandwidth link 
between the server and the user equipment, the capabilities of the users' computers, and/or 
25 display characteristics, and/or browser capabilities, and/or physical room characteristics. 

These and other objects are satisfied by the method comprising the steps 
of providing content from a web server to web browsers of users over a network in response 
to user requests comprising: 

maintaining stored personalizing information for users; 
30 associating the personalizing information applicable to each individual user 

issuing a request for content; and 

dynamically generating the content provided in response to the request taking 
into account the associated personalizing information; 

wherein the personalizing information includes the lowest bandwidth link 
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between the web server and the user's web browser. 

The personalizing information may also include the capabilities of the 
users' computers, and/or display characteristics, and/or browser capabilities, and/or physical 
room characteristics. 

5 These and other objects are satisfied by the method comprising the steps 

of providine content from a web server to web browsers of users over a network in response 
to user requests comprising: 

maintaining stored personalizing information for users; 

associating the personalizing information applicable to each individual user 

10 issuing a request for content; and 

dynamically generating the content provided in response to the request taking 
into account the associated personalizing information; 

wherein the personalizing information includes user need information indicative 
of at least the job of the user in the organization. 
^3 In order to achieve this the web server has to be supplied with information 

about the user and the user's environment. This information can be obtained with the use of 
web forms, automatic detection of the IP address of the requesting client, server-browser 
communication, smart cards and/or active badges. Information about user preferences, user's 
physical and computer environment, and usage profile can be stored at the server. The server 
20 can then use all this information to generate personalized content. 

Other objects, feamres and advantages of the present invention will 
become apparent upon perusal of the following detailed description when taken in conjunc- 
tion with the appended drawing, wherein: 

25 Figure 1 is a block diagram indicating a web system according to the present 

invention, including a personalized web server; and 

Figure 2 is a flow chart illustrating how the personalized web server of Figure 
I uses personalization information to personalize the web pages it generates. 

3Q Referring to Figure 1 of the drawing, there is shown a web system 10 for an 

intranet of a hospital or other care giving instimtion including a personalized web ser\'er 12 
which in accordance with the invention includes personalization means 20-28 which will be 
described hereinafter, and a plurality of user or cliem computer or other devices capable of 
operating a web browser, one of which is generally indicated at 14. The user web browser 
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Operating equipment 14 and the web server 12 are coupled for bidirectional communication 
via a network path, generally indicated by 16, which in practice is implemented by one or 
more wireless or wired network links having associated bandwidths or data rates. The user's 
equipment may be of a type which varies over the gamut of web browser capable devices 

5 including high and low end computer workstations, computer laptops or notebooks, palmto- 
ps, personal digital assistants (PDAs) and even televisions, which may be equipped with 
separate boxes for that purpose. The user may be a physician or employee of the hospital, a 
patient, or a visitor. 

The communication over path 16 includes requests from user equipment 14 

10 and responses from server 12 using the hypertext transpon protocol (HTTP) which invoke 
an operating layer or module 18 of server 14 providing HTTP service. Specifically, user 
equipment 14 in a known manner requests downloads of panicular web pages written in 
hypertext markup language (HTML) and other data objects (such as images and documents in 
the form of graphics, audio clips, video clips or cines. and other files). The responses from 

15 the web server, in particular the personalized web pages and/or data objects provided, are 
dynamically generated in layer or module 20 using server scripts 22, that utilize personaliz- 
ing information maintained in the server's file systems or databases 24 (pertaining to access 
privileges and security), 26 (pertaining to environment profiles), and 28 (penaining to user 
needs, preferences, and usage profiles). 

20 Specifically, server scripts 22 check user access privileges, user preferences, 

usage log. and environment profile. In the case that the request is for a particular patient, 
access control for that particular patient is also checked. The outcome is rules for retrieving 
computer based patient records (CPR) information and rules for generation of web pages. 
The scripts filter, retrieve, and process the CPR information. The CPR information is 

25 distributed in the CPR databases 30 of the Picture Archiving and Communication System 
(PACS), Hospital Information System (HIS), Radiology Information System (RIS), laboratory 
system. Intensive Care 

Unit (ICU) system. Pharmacy system, etc. The scripts then generate dynamic server web 
pages. The web server sends back the dynamic web pages to the client web browser. 
30 The information necessary or useful to personalize the server's responses 

include user attributes, user privileges, computer characteristics and network connection, 
display characteristics, browser capabilities and room characteristics. They are discussed 
individually as follows: 
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User Attributes: 

User attributes indicate the relaiionship of the user to the institution or a 
particular patent, as well as some interests and preferences. They are divided into the 
categories of staff, patient and visitor, with subcategories as follows: 
5 - Staff (physician (dept., function, specialty, interest, education, level of security, 

favorite browser, etc.), nurse (dept., function specialty, interest, education, authority for 
information access, favorite browser, etc.), administration (dept., function, interest, etc.))- 

- Patient (inpatient, outpatient, dept./section (internal medicine. ER, cardiology, etc.), 

favorite browser). 
10 - Visitor (for which patient, first lime, regular, etc.). 

User Privileges: 

User privileges are organized into the following categories: 

- Write access 
15 - Read access 

- Full view to CPRs of all patients 

- Full view to CPRs of some patients 

- Minimal view to CPRs 

- No view to patient CPRs 

20 

rnmputer characteristics and network co nnection: 

The computer characteristics and network environment aspects of the computer 
environment are organized into the foUowiiig categories, and subcategories: 

- Type (SUN (Ultra I. Sparc 20, etc.), PC (Pentium, 486, etc.), Mac. etc.) 
25 - Operating system (Unix (flavor of Unix), Windows (95. NT, 3.1), MacOS) 

- Support for audio and video, if any 

- Lowest Bandwidth Link to Server (bottleneck link): ATM. fast Ethernet, Tl, 
Ethernet, ISDN, phone line, wireless 

30 Display Characteristics: 

The display characteristics aspect of the computer environment are organized 

into the following categories and subcategories: 

- Spatial resolution (2Kx2K. IKxlK), XGA, SVGA, VGA, etc. 

- Monochrome or Color 
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- Modulation Transfer Function 

- Amplitude resolution (number of levels of gray scale and/or of color) 



Browser capabilities: 

5 The browser capabilities aspect of the computer environment include the 

following categories: 

- Whether or not Java is enabled 

- Whether or not ActiveX is supported 

- Which versions of HTML and HTTP are supported 
10 - Which plug-ins are supported 

Rnnm Characteristics: 

The room characteristics indicating the physical environment of the user are 
organized into the following categories and subcategories: 

- Function of room (laboratory, fihn reading, library, public room, private office, 
15 home, etc.) 

- Lighting conditions (dark room, bright room, etc.) 

- Audio characteristics (loud room, quiet room, etc.) 

The foregoing has described under four categories: (A) Access privileges, (B) 
User preferences, (C) Usage log, and (D) Environment profile. Access privileges depend on 
20 federal and state regarding patient confidentiality law. Each hospital may also have their own 
protocols for ensuring patient confidentiality, data integrity, and security (digital signatures, 
authentication, and document alteration prevention techniques). The system administrator of 
the hospital is responsible for maintaming the policies and rules for access to information. 
Therefore, each user will have a profile which will state what information for each patient 
25 they can access. User preferences are entered by the user. The user can enter preferences 
with the use of a hypertext markup language (HTML) form or Java applets. The usage log 
for each user is automatically tracked by the server. Environment profile information is 
obtained from the IP address of the client, client-server browser communication, smart cards, 
and active badges. These methods of obtaining personalization information will now be 
30 explained in more detail. 

With respect to the use of forms, the first time that a user accesses the web 
server he/she will be asked to enter information about himself/herself. This will only have to 
be done once, unless the user needs to update this information. The form can typically ask 
for information about the user's department/section, function, specialty, interest, and 
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education level. Since the client can have more than one web browser, users will also have to 
choose their default browser. The default browser is then staned up automatically the next 
time they log in. 

IP addresses of clients requesting information from the server, where they are 
5 statically rather than dynamically assigned in the intranet, uniquely identify the client. In 
such simaiions, the IP address of the client is automatically detected by the web server when 
a request comes in. The user environment information which is stored in database or file 
system 26 at the server includes computer and room information. Therefore the IP address 
can be used to idemify the computer type (e.g. SUN. PC, MAC. etc.), its add-on capabilities 
10 (e.g. sound card, video decoding hardware, etc.), its lowest bandwidth connection link to the 
web server (e.g. ATM. Ethernet, ISDN, wireless, etc.), the resolution of the display to 
which it is attached (e.g. 2Kx2K, IKxlK, XGA, SVGA. VGA, etc.), the location of the 
computer (provided it is not mobile), and constraints imposed by the location. System 
administrators of the hospital's computing facilities would update such system resource 

15 information as necessary. 

The web server can communicate with the client web browser and detect the 
browser capabilities (support for Java, ActiveX, versions of HTML and HTTP, plug-ins, 
etc.). The web server can then serve the appropriate content. 

A smart card carried by a person (a credit card sized plastic card that is 
20 embedded with a computer chip that can contain personal information) can be read by a 
computer- based reader at cliem equipment 14, when a person accesses the intranet. The 
information read from the smart card may be used not only to prove identity, but also to 
provide the other user attributes necessary to personalize web content. 

Active badges (an Olivetti product) can be used to locate badge holders in a 
25 hospital. An active badge emits its identification code at regular intervals via an infrared 
source. This code can be detected and stored by sensors that are distributed throughout the 
hospital locations where web browsing can take place. Once the physical location of the web 
client is determined appropriate contem can be presented to them. This is particularly useful 
for mobile client equipment, such as laptops connected via a telephone or wireless connec- 
30 tion. Most computers, however do not get moved and their IP addresses can be used to 
locate them. 

However the personalizing information is collected, as previously noted, it is 
stored in the database or a file systems 24, 26, and 28 maintained by the server 12. Since the 
client browser 14 can transmit its capabilities to the web server, so there is no need to store 



BNSDOCtD: .iWO__flea207W1JL^ 




wo 98/32076 PCT/IB98/00014 

8 

this information. 

Once information about the user and his/her environment is known, server 
scripts 22 can be used to dynamically generate in module 20 the appropriate content for the 
client. Server scripts can be written in VBScript. JScripts, Java Script. Java, etc. 
5 The following are examples of constraints imposed in personalizing the 

content: 

- The specialty, such as cardiology, of a physician user should be taken into account 
so that the physician receives only the news and information which is presumed lo be of 
interest. 

10 - A user should only see the information that he/she is privileged to access. 

- Rooms that are meant to be quiet rooms such as reponing rooms or library locations 
should not be exposed to audio files. 

- A computer that does not have a sound card should not receive sound files. 

- A laptop with a low-speed modem and a small screen should not be exposed to large 
15 movie files or large images. 

- A browser that does not support ActiveX should not be exposed to ActiveX 
components. 

Personalized content is not only more interesting and relevant to the user. It 
also makes more efficient usage of network bandwidth and system resources, and reduces 

20 server load. It can also reduce document retrieval latency. 

With respect to access privileges, it is clear that in a hospital environment 
different users will have different privileges for access to information based upon their 
specialty and their relationship to the patient (i.e. patient's attending physician, consulting 
physician, attending nurse, etc.). For example, not only do different occupations/specialties 

25 need different "views" of the CPR which are tailored to their needs but different patient 
relationships may influence the level of detail presented in sensitive areas. For example, all 
physicians who treat a patient may see that the patient is undergoing psychiatric treatment, 
but the details of this sensitive area may be privileged only to the attending psychiatrist and 
the patient. Also, access to records for certain "VIP" patients (politicians, actors, etc.) may 

30 be further restricted than for normal patients, due to the increased potential for adverse 
publicity and blackmail. Patients should be able to see their own CPRs. in full detail. The 
same is also true for legal guardians of underage or legally incapable patients. 

All users should have a default log-in which has minimal privileges, but is 
based on location. Therefore, any health care provider inside a hospital may be able to see a 
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summary CPR for any in-patient without a special log-in (other than identifying themselves 
as health care providers, for example via smart card ID). However, this capability would not 
be available from outside the firewall guarding the integrity of the intranet. 

Security within the intranet system is provided by well known protocols which 
5 use digital signamres. authentication, and document alteration prevention techniques. 

In addition to user privileges and interests, the CPR may be tailored to the 
user's equipment and link bandwidth. Many users (physicians, in particular) may have 
several types of equipment/links e.g. at the office, the hospital, and at home. Further, 
terminals which are not assigned to particular individuals may be provided at the hospital for 
10 referring physicians visiting their in-patients. Each user might, therefore have several 
profiles. The profile placed into use at any given time could be determined by the client 
location (IP address) and capabilities (some of which come as CGI environment variables at 
log-in). Preferably, server 12 personalizes image size (full resolution or minified) and 
transmission compression (none, lossless, lossy/quality) to the link bandwidth and the 
15 capabUities of client equipment 14, so that the user need not wait for large transfers at 
locations with low speed connections. This applies to video and sound files. 

Computers with low-bandwidth connections and/or low-resolution displays 
need low-resolution images and lower frame-rate video. When considering heterogeneous 
networks the lowest network bandwidth link between the server and the clients is the limiting 
20 factor. Scaling and layered video coding schemes are one method which can be used to 

multicast one single compressed video stream across heterogeneous networks, computers, and 
displays. The routers can then send the appropriate number of compressed video layers to the 
appropriate machines for software or hardware decoding. For example, a high-end workstat- 
ion with a high resolution display and high bandwidth comiection to the server will receive 
25 the base layer plus all the enhancement layers. An intermediate computer with a moderate 
resolution display and a moderate bandwidth comiection to the server can receive the base 
layer plus some of the enhancement layers. A low-end workstation with a low resolution 
display and a wireless connection, however, will receive only the base layer. 

The dynamically generated server pages can be partitioned to accommodate 
30 different information categories. A large part of the page will be reserved for personalized 
information. The personalized information is generated using the user supplied preferences as 
well as by tracking the user. For example, the web sites and contem which the user visits 
most frequently at specified times and dates can be presented to him/her at similar times and 
dates. A section of the page can also be reserved for general information which should be 
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seen by everyone. Another pan of the page may be reserved just for advenising. 

Hospital administrators can decide if they would like to generate extra 
revenues through advertising. For example, hospitals may choose to charge commercial 
companies who advenise on the hospital intranet. With a personalized web site the advenis- 
5 ing, can be targeted to the appropriate audience. For example, drug companies can target the 
right specialists for their products. Patients can be exposed to over-the-counter drug 
advenisemenis and general diet and health related advertisement. Visitors can be exposed to 
similar patient-oriented advertisements as well as more general consumer-oriented advertise- 
ments, 

10 Figure 2 illustrates how personalization information is used to generate custom 

web pages. The first step for the user is to enter his/her name and password with a web 
browser at block 32 which is applied to the rule generation block 34. The latter generates 
rules for retrieving the appropriate information from the CPR and processing it for a 
personalized presentation. However, if it is determined in block 34 that the user is unautho- 

15 rized, then in block 36 server scripts generate an error message web page which is sent to 
the client at block 38. Information about the computer is automatically obtained at block 34 
from the IP address. The user also has to provide at block 32 the ID of the patient which 
he/she is interested in. This is because user privileges and access control rules are patient 
dependent. 

20 In rule generation block 34, the highest priority of rules are user privileges 

and access control rules which are generated in a first stage 40. Thus, if a user is not 
authorized to view certain information categories for a panicuiar patient then such informa- 
tion is not accessible even if the user indicates otherwise in his/her preferences. User 
privileges and access control rules state which information the user is allowed to access. 

25 User interest rules are then added in second stage 42 so that if the user is authorized to view 
certain information but is not interested in doing so then he/she is not exposed to uninterest- 
ing information. The usage log is also used here to make sure that frequently visited sites and 
information are not filtered out. 

The last set of rules, which are generated in third stage 44, take into account 

30 the user's environment such as capabilities of the computer, network connection, display, 
browser, and room characteristics. Thus, if the display of the user can not handle 
high-resolution images low resolution images should be presented to the user, even if he/she 
has requested otherwise. There can be trade-offs for cenain simations. For example, if the 
network connection of the user is slow but the display resolution is high the user can view 
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high-resolution images and video data, provided he/she is willing to wait a long time. The 
user should be given the choice to make that decision if it does not affect anyone else. 

The outcome of the three stages 40, 42. 44 of rule generation are rules for 
retrieving CPR information and rules for generation of web pages. At block 46, using these 
5 rules, server scripts retrieve the appropriate CPR information. The scripts also process the 
information at this point so that it is personalized for the user. 

For example, high-resolution images/video may be sampled at lower resolution, or numerical 
information may be presented graphically. At block 48, server scripts dynamically generate 
web pages for the client. The generated web pages are then sent, at block 38, to the browser 
10 of the client. 

It should now be apparent that the objects of the present invention have been 
fulfilled. While the present invention has been described in panicular detail, it should also be 
appreciated that numerous modifications are possible within the intended spirit and scope of 

the invention. : 
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CLAIMS: 



An information system comprising a network and at least one web server 



which is accessible via the network by user equipment operating a web browser, which 
server includes means for dynamically generating content that is personalized to the user 
taking into account user equipment environment information provided or stored so as to be 
5 accessible to the server which is indicative of at least the lowest bandwidth link between the 
server and the user equipment. 

2. An information system as claimed in Claim 1, wherein said network is an 
intranet of an organization and said means for dynamically generating content that is . 
personalized to the user further takes into account user need information provided or stored 

10 so as to be accessible to the server which is indicative of at least the job of the user in, the 
organization. 

3. An information system as clauned in Claim 1, wherein said network is an 
intranet of an organization and said means for dynamically generating content that is , 
personalized to the user further takes into account user information provided or stored so as 

15 to be accessible to the server which is indicative of at least access rights of the user to 
confidential information maintained by the organization. 

4. An information system as claimed in Claim 1, wherein said means for 
dynamically generating content that is personalized to the user further takes into account user 
environment information provided or stored so as to be accessible to the server which is 

20 indicative of characteristics of the room in which the user equipment is located. 

5. An information system comprising a network which is an intranet of an 
organization and at least one web server which is accessible via the network by user 
equipment operating a web browser, which server includes means for dynamically generating 
content that is personalized to the user taking into account user need information provided or 

25 stored so as to be accessible to the server which is indicative of at least the job of the user in 
the organization. 

6. An information system as claimed in Claim 5, wherein said means for 
dynamically generating content that is personalized to the user further takes into account user 
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infonnation provided or stored so as to be accessible to the server which is indicative of at 
least access rights of the user to confidential information maintained by the organization, 

7. A method of providing content from a web server to web browsers of users 
over a network in response to user requests comprising: 

5 maintaining stored personalizing information for users; 

associating the personalizing information applicable to each individual user issuing a 
request for content; and 

dynamically generating the content provided in response to the request taking into 
account the associated personalizing information; 
10 wherein the personalizing information includes the lowest bandwidth link between the 

web server and the user's web browser. 

8. A method of providing content as claimed in Claim 7, wherein said network is 
an intranet of an organization and said personalizing information taken into account ftirther 
includes the job of the user in the organization. 

9. A method of providing content as claimed in Claim 7, wherein said network is 
an intranet of an organization and said personalizing information taken into account further 
includes access rights of the user to confidential information maintained by the organization. 

10. A method of providing content as claimed in Claim 7, wherein said personaliz- 
20 ing information taken into account further includes information which is indicative of 

characteristics of the room in which the user equipment is located. 

11. A method of providing content from a web server to web browsers of users 
over a network in response to user requests comprising: 

maintaining stored personalizing information for users; 
25 associating the personalizing information applicable to each individual user issuing a 

request for content; and 

dynamically generating the content provided in response to the request taking into 
account the associated personalizing information; 

wherein the personalizing information includes user need information indicative of at 
30 least the job of the user in the organization. 
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